TI-2011-03940 Aliases CVE-2011-4574 GHSA-69cr-qg65-xgm7

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm.

MEDIUM 44CWE-338Published 2021-10-27 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results.

Why it matters now

EPSS 0.01087 65th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	PolarSSL	PolarSSL 1.1.0	—	No fix listed	CNA

PolarSSL Vendor— Affected PolarSSL 1.1.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:polarssl:polarssl::::::::	before 1.1.0	Vulnerable	polarssl

cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·polarssl

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2011-4574
2026-10-03 Alias added: GHSA-69cr-qg65-xgm7

References

Advisory 1

https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02

TI-2013-00104 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL… CVSS 2.0LOW 2.6
TI-2015-01069 The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12… CVSS 2.0HIGH 7.5
TI-2014-07923 Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service… CVSS 2.0HIGH 7.8
TI-2014-07087 Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to… CVSS 2.0HIGH 7.8
TI-2012-01903 A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak… CVSS 3.1HIGH 7.4
TI-2015-04447 Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly… CVSS 2.0MEDIUM 6.8

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences